Say it with me everyone:
“Bitcoin computes a quantum of time, and there is noooo second best!”
View quoted note →
Login to reply
Replies (17)
Whats your take on the latest quantum news?
It’s a story and a headline with no proof. Where is the proof?
How can any CQC model prove their “qubits”? The psyops/false flags are coming to justify “upgrades” to the protocol.
I stand with my assertion: they don’t have any real qubits because their definition of superposition is wrong and the entire theory they are building upon is wrong. My proof is Bitcoin.
What about the quantum compute you can use remotely from ibm?
Proof that it’s quantum and not just classical?
Shouldn't there be a way to test? Running an equation and comparing to possible classical compute times
There is a way to test. Not by clock time though, since at small scales and high noise clock time doesn't come into it.
You can use IBM's Qiskit to run an experiment to confirm the query complexity scaling, which is the core of the quantum advantage. Other wors, yes you can test and yes you can know that quadratic scaling powered by quantum mechanics is real.
-Run Grover's for a small database of size N1 (e.g., N=4 states).
-Count the optimal number of iterations needed to find the answer.
-Run Grover for a doubled database of size N2 (e.g., N=8 states).Y
-You will find that the optimal number of iterations only increases by a factor of sqrt2, not by 2 (as in no square root).
Don't leave it on a loop tho, IMB charges $100 USD per minute of QPU) time :)
Why is there such a distribution of opinions on the threat of quantum breaking elliptic curve encryption?
For the core math and mechanics there's no real controversy, just fringe antics. While the core math is settled tho, some "controversy" stems from highly technical arguments about engineering feasibility and timeline. But not the science itself. So that might be where you're seeing mixed messages.
Is what Amir Taaki says about it true? That the scale of resources gathering and production to make a workable quantum computer would take an unbelievable ammount of resources and we would see it coming well in advance?
Or is that just a 1960s electrical engineer postulating about making a computer with todays compute with the methods of 1960
Nah, that is not true. Look at the history of classic transistors. Every year a prediction, every next year that prediction blown out of the water.
There are many quantum approaches. Topological is an interesting one, but there are others. And generally speaking the number of working logical qubits needed for a quantum computer to break the pre-image resistance of SHA-256 is in the range of thousands. Plus no shortage of motivation, just think of what cracking 256 gets you.
If later this year some researchers announce they've created a machine with 100 logical q-bits, that's be a monumental engineering feat but definitely outside the realm of possibility. (It'd be a ChatGPT3 moment.)
And if that happens later this year then bitcoin is effectively dead, since there is little chance the protection can evolve faster than the threat. Bitcoin hasn't agreed upon a single, standardised post-quantum cryptographic algorithm yet, to say nothing of implemenation. Too busy arguing about op-return and jpegs. That's how it ends.
How many logical bits do we have now in one machine?
That depends on how reliably you want them to be. What you might call "highly reliable" then 12. "Decent reliable" then 24!
The threat to bitcoin's signing keys is Shor's Algorithm, and with a few thousand highly-reliable logical q-bits it's game over for enough keys to cause catastrophic economic failure to the whole network, like a body going into shock.
SHA256 is another thing, that's Grover's algo and to "crack" SHA there's a silly number of operations so you have to take those into account alongside q-bits, and it's like the age of the universe. So "crack" is not quite the right word. But to gain a speed edge is a real thing, and that leads to this difficulty manipulation attacks and other things. (Depends on q-bits but also the machine's raw speed.)
Shor's is enough on it's own to deal a knockout punch to bitcion though, if it happens soon enough.
Won't that always be an issue even if we do upgrade the protocol the old wallet addresses will still be vulnerable
Its a blood loss issue. If you lose enough blood you go into shock. Same for bitcoin. The old keys will always be vulnerable but on their own maybe to not enough blood loss. But all the not old keys that are known and cant change in time (keep in mind no agreed algo to even change to yet) add them and that’s total shock
Yeah that makes sense, hopefully we don't ossify completely